Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier: U9+zfsghcQ1TTEeDFgKDe6kSry9EJiDWBgvksifOGKI=
Subject key identifier: 70:A6:54:8D:CF:89:38:60:B7:A1:39:52:23:3E:EB:B1:2D:D8:75:AC
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 0197745293939FD16A5ACD96CA874D8ED65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number: 050A
Signing time: Sun 15 Jun 2025 16:00:58 +0000
Manifest this update: Sun 15 Jun 2025 16:00:58 +0000
Manifest next update: Mon 16 Jun 2025 16:00:58 +0000
Files and hashes: 1: 9NrcBYoOJdr1BdxBgzzOEAUeKdo.roa (hash: /ZwEP+MS+NaeETxxOk3x1Xyx7z9RztZFuBBdT3AXCpU=)
2: ETjV-BKWJLPwYpMPREKNFP_t814.roa (hash: FEbx//ip3zOVOOaz/mGYLmuNmaoO9k1UL7AAezYzLxQ=)
3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: xA06+CwdQdnpk+HBPWv6XPPj9tTkcP5RSLY8BpnA8Yg=)
4: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (hash: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:93:93:9f:d1:6a:5a:cd:96:ca:87:4d:8e:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Jun 15 16:00:58 2025 GMT
Not After : Jun 16 16:00:58 2025 GMT
Subject: CN=70a6548dcf893860b7a13952233eebb12dd875ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:3e:87:7e:62:58:fa:42:1c:63:5c:a6:84:
16:b0:2e:49:c6:6e:a2:eb:81:8d:8b:2a:19:d1:0a:
d7:d6:3a:68:36:c0:11:07:1a:43:40:36:b4:0d:8f:
b9:cd:54:42:c1:db:6a:63:4f:3e:39:72:39:ed:aa:
16:e7:a7:18:12:f1:ac:9f:e9:cf:19:76:f2:8c:82:
3c:e6:55:f2:25:cb:aa:58:75:1f:69:50:66:5e:16:
c4:4f:26:52:b0:c3:92:a2:38:4e:7f:26:f4:89:a0:
59:c1:0d:27:d1:8b:df:20:da:c9:46:d6:36:76:cb:
87:d8:01:3f:80:37:f1:24:8c:4e:e3:bd:dc:b9:13:
6a:84:9b:17:95:70:d0:59:0f:6c:2e:bb:77:b4:4b:
a0:e9:0f:c1:d0:cd:45:6d:70:c9:38:4f:a4:e3:8f:
11:ab:c5:12:88:7e:46:e5:c4:8c:9a:03:93:87:8e:
b5:34:21:c3:f1:35:bd:f1:83:0a:1c:05:38:5f:97:
49:90:9b:2b:ba:a8:08:bc:03:81:1a:b2:97:88:d1:
a9:8c:03:db:6c:34:61:d0:b8:99:fa:f9:28:58:b3:
35:d7:f3:d3:62:8a:ff:18:bd:18:e9:6c:37:60:c3:
c8:48:88:84:4b:a4:bf:d2:06:07:9a:b0:51:b6:7a:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:54:8D:CF:89:38:60:B7:A1:39:52:23:3E:EB:B1:2D:D8:75:AC
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:54:f3:10:2c:89:73:4a:61:3c:f1:57:4a:30:f3:e0:26:ae:
a1:aa:d8:4a:73:9b:87:5b:8d:4e:b4:d2:a1:5b:11:b5:4d:a0:
c5:6d:d3:79:90:9c:09:3b:25:1d:66:7f:32:4e:ab:6d:ee:de:
07:b5:47:cc:ae:c4:d0:35:4d:8b:1c:78:02:f0:74:cc:a6:ba:
cf:cc:17:26:38:e1:45:ab:06:02:5c:62:a9:ef:62:ab:6c:f1:
14:1d:36:b9:c7:3c:03:f8:01:ad:73:f2:b0:7d:5d:c0:2e:79:
6d:b9:71:24:d4:1c:c6:68:46:a7:bf:06:c6:34:c3:c0:46:fa:
09:97:21:aa:4a:c0:26:30:1c:1f:41:8d:de:a5:6f:af:f9:f2:
a1:c7:3e:49:55:53:49:e6:fc:71:fe:b5:46:74:c1:29:6a:2c:
7e:be:0b:5b:66:dd:eb:bd:d5:cc:b5:24:6b:57:e7:9d:33:40:
1e:ed:3f:fd:1d:6e:db:d6:36:76:82:12:3d:74:31:09:93:19:
53:e2:6d:29:f6:9b:61:83:63:9c:59:0c:68:6f:d1:fe:1e:f4:
7e:51:ff:ce:1c:b1:ca:68:75:26:3e:60:88:07:a8:06:f4:76:
ee:16:fb:d4:2f:e0:96:47:59:6b:68:be:5e:e5:a4:ad:cc:c3:
45:03:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:55:59 2025 by rpki-client